shadow vulnerabilities (Ubuntu)

10 vulnerabilities.

• shadow Ubuntu shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g.,... CVE-2024-56433 Public exploitFix availableDisputed 3.6 LowDecember 26, 2024
• shadow Ubuntu Shadow-utils: possible password leak during passwd(1) change CVE-2023-4641 Fix available 4.7 MediumSeptember 13, 2023
• shadow Ubuntu In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID... CVE-2023-29383 Fix available 3.3 LowApril 14, 2023
• shadow Ubuntu shadow regression USN-5745-2 Fix available No scoreNovember 29, 2022
• shadow Ubuntu shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees CVE-2013-4235 Fix available 4.7 MediumDecember 3, 2019
• shadow Ubuntu An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an... CVE-2018-7169 Fix available 5.3 MediumFebruary 15, 2018
• shadow Ubuntu In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in... CVE-2017-12424 Fix available 9.8 CriticalAugust 4, 2017
• shadow Ubuntu shadow regression USN-3276-2 Fix available No scoreMay 17, 2017
• shadow Ubuntu A race condition was found in util-linux before 2.32.1 in the way su handled the management of... CVE-2017-2616 Fix available 5.5 MediumFebruary 22, 2017
• shadow Ubuntu Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to... CVE-2016-6252 Fix available 7.8 HighJanuary 27, 2017